SharkFest ‘16 


The Ancient History of Computers 
and Network Sniffers* 


*Or: Failure is always an option 
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Why am | here? 


Network 
General 


Token Ring Sniffer® 
first shipped September 1986 
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“sissy Computers” 
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WHY 


BE CONTROLLED BY ATIMESHARING SYSTEM 


WHEN YOU CAN CONTROL A 
CLUSTER ONE? 


Clustersharing is . .. several individual 
computers sharing a large program library, 
while preserving the individuality of each 
machine, 

The CLUSTER/ONE™ Concept offers 
each BASIC user his own computer rather 


than a small share of one central processor 
Nestar Systems’ CLUSTER/ONE creates 
a new dimension in low-cost computing, 


combining the po 
individual micr 
to store and shar million byte source 
program library on two full-size flexible 
diskettes 

To tind out more ut CLUSTER/ONE, 
call us at 415 Or write to 
Nestar Systems, Inc., 430 Sherman Avenue 
Palo Alto, California 94306 
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Cluster/One: Timesharing has come ‘to the microcomputer world 
Peninsula 


By Paul Voakes 
Tienes Stoff Writer 

PALO ALTO — If things work 
out, Harry Saal could become a 
kind of social chairman for the per- 
sonal computer industry. 

Saal’s new company, Nestar Sys- 
tems Inc., has developed a system 
that can bring those microcom- 
puters together to do things they 
could never do alone. Nestar makes 
a little white box that brings the 
concept of timesharing to the mi- 
crocomputer world. 

For Saal, the possibilities are end- 
less. Bank customers could stop by 
for financial consultations with the 
computers; storefront computer 
centers could provide entertain- 
ment or computation services to 
the public; and each member of a 
school class could learn the same 
Jesson on his or her personal com- 
puter at the same time. 

Saal, 34, is a former university 
computer science instructor and 
software designer for IBM. The 
other three principals in the firm, 
Leonard Shustek, Nicholas Fortis 
and James Hinds, also are former 
employees of firms that manufac- 
ture large computers. They've de- 
cided to think small, Saal said, be- 
cause of the growth they see in the 
microcomputer’s future. 

Market researchers estimate that 
the market, now about $500 million 
strong, should grow to at least $2.4 
billion by 1982. Nestar expects to 
piggyback on, and accelerate, that 
growth with its new product, Clus- 
ter/One. 

The hobbyists and whiz kids 
comprising the hard core of the mi- 
crocomputer market have deve- 
loped thousands of programs, for 
nearly every imaginable game and 
practical function, Saal explained. 
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But the programs are kept on cas- 
settes. When they’re made avail- 
able they cost between $10 and $50 
each and it takes several minutes to 
load each from one computer to an- 
other. That tends to limit each mi- 
crocomputer’s “library” of infor- 
mation. 

The Cluster/One, the little white 
box, contains two diskettes that 
hold about 630,000 bytes of data, 
which translates into about 200 dif- 
ferent programs. Each of as many 
as 30 microcomputers in a room or 
building is connected, by hardwir- 
ing, to the Cluster/One. Each small 
computer user has only to call up a 
particular program from among 
the 200, and his or her own com- 
puter is loaded and ready to go ina 
couple of seconds. 

Saal said the Cluster/One goes 
one step better than timesharing 
because each station, the micro- 
computer, is a self-contained com- 
puter that merely draws on the 
memory of the central unit. In 
large-system timesharing, if several 
stations want to use the central 
computer at the same time, the de- 
mands on the computer create long 
delays. 

Each station can use a different 
program from the Cluster/One at 
the same time as well. For example, 
if 30 students at the 30 computers 
are learning at 30 different levels, 


the system provides those 30 differ- 
ent programs at one time. 

The Cluster/One also can mix 
apples and oranges, or, in the case 
of small computers, Apples and 
Pets and TRS-80s and any other 
microcomputer brand on the mar- 
ket. 

Nestar’s first market target is the 
school system, and Saal is un- 
daunted by the post-Proposition 13 
tightening of district budgets 
throughout the state. The Clus- 
ter/One system with four micro- 
computers sells for about $10,000, 


“and that’s $90,000 cheaper than - 


$100,000,” which is what Saal said a 
similar computer system would 
cost a school a few years ago. Once 
schools realize the computer's 
value as a teaching aid, Saal said, 
every school in the country, on ele- 
mentary, secondary and college 
levels, will be using them. 

“I believe the computer will in- 
sinuate itself into education in a 
way that is irreversible,” he said. 
Several Peninsula schools already 
have a collection of microcom- 
puters for student use, and Nestar 
has been busy showing those 
schools how the Cluster/One ties 
the computer together and in- 
creases their capacities. 

Saal also said the microcomputer 
is being used in college chemistry 
classes, to simulate experiments 
that are either too dangerous or 
costly for each student to perform 
in the lab. 

One problem with marketing to 
public school districts, he conced- 
ed, is the time between the staffs 
request and school board's approv- 
al to buy a system. 

But the firm is exploring other 
avenues. It is negotiating to take 
part in a franchise network of 


al 
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Times stoff photo by Gene Tupper 


Harry Saal checks one of the diskettes in Nestar's Cluster/One, while the microcomputers elsewhere in- 
the corporate headquarters (Saal's garage) flash some of the Cluster’s programs. 


stores to help students prepare for 
Standardized examinations like the 
Scholastic Aptitude Test or law 
school admissions tests. Each stu- 
dent would work on practice exams 
on the microcomputer, and the 
Cluster/One would contain dozens 
of training programs for the differ- 
ent exams. 

“There are 1.5 million students 
each year who take the college 


boards alone,” said Saal. “And 
many of them get coaching. We'll 
be able to update the programs 
from year to year as the tests 
change their emphases, and each 
program wil) work on the weak- 
nesses of the student.” 

Nestar is a start-up business in its 
“garage” stage, in the Hewlett- 
Packard tradition. The Nestar em- 
ployees congregate in Saal's home, 


and the Cluster/One and a gaggle 
of microcomputers are on line in 
the converted garage. Next month’ 
the firm plans to move into an office 
suite on Sherman Avenue, howev- 
er. 

So far, the company has been fink: 
anced by the four principals, but 
Saal said they'll be looking for very 
ture capital later this year as prd- 
duction demands increase. “ 
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Computers/Peripherals 


Cluster/One Connects 30 . 
Apples, PETs Or TRS-80s 


PALO ALTO, CA— Anew system, . 


Cluster/One, from Nestar Systems (a 
new company here) allows the inter- 
connection of up to 30 Apple II, Com- 
modore PET or Radio Shack TRS-80 
personal computers. It also’ brings 
large-capacity dise storage and high- 
quality printing to personal-com- 
puter networks. 

Nestar’s concept allows the shar- 
ing of expensive resources, but does 
not reduce the advantages of power- 
ful, low-cost personal computer sta- 
tions. Since all processing is at the 
users’ terminals, the system is 
degraded very little as the number of 
users increases, whereas standard 
time-sharing systems can be greatly 
degraded as more users are Airy 

Cluster/One overcomes most of the 
disadvantages of personal computers 
as it ~ a large, central pro- 
gram library, large mass storage us- 
able by each station, a high-quality 
printer usable by each station and the 
flexibility afforded by such per- 
ripheral capabilities. 

The Cluster/One system includes 
hardware (central unit, console and 
bus) and software. The central unit 
has a self-contained storage facility— 
two eight-inch Shugart flexible-dise 
drives that are soft sectored with 256 
bytes per sector. Each disc side holds 
about 100 average-sized BASIC 
programs, 

Housed with the drives are power 
supplies, expanded RAM for the con- 
sole computer, a floppy-dise con- 
troller, a 
for transmitting and receiving infor- 
mation from the personal computer 
stations (drones), associated elec- 
tronics and cooling. 

Each personal computer requires 
special hardware and software— 
provided in the form of plug-in boards 
in the Apple and PET, and a small 
mini-box in the TRS-80—to communi- 


us controller (ClusterBus) * 


cate with the console computer, the 
Queen. No modifications are made to 
the drones. Installation is by plug- 
ging in boards and/or connecting 
cables. 


In the current Nestar system the 
Queen is a Commodore PET, which 
starts the system and monitors its 
operation. It also runs various utility 
programs, such as initializing new 
diskettes and making back- up copies. 

The Queen is connected to the 
drones by a 26-wire flat ribbon cable 
that begins at the central unit, runs to 


the first station, from there to the . 


second, and on to a maximum of fif- 
teen units. From a second ClusterBus 
channel, a second string of 15 sta- 
tions can be connected to the same 
Queen. The maximum cable length 
from the Queen to the farthest station 
is 250 feet. , 

Data move over the ClusterBus at 
80,000 bits per second. Error- 
checking facilities are in the Queen 
and drone software which, in most 
cases, detects errors automatically 
and then retransmits the damaged 
portions of data. 


One-Language Limitation 


The system is now limited to the 
support of only one language— 
Microsoft BASIC (also known as 
Commodore BASIC, Applesoft and 
Radio Shack Level II BASIC). There 
are no plans, according to Dr. Harry 
J. Saal, Nestar Systems president, to 
support other languages. However, 
he says the firm is considering sup- 

ort of new microcomputers as they 
me available. But there are no 
plans for a general S-100 ClusterBus 
interface and accompanying soft- 
ware pappart Apple, Commodore and 
Radio Shack also have decided not to 
provide S-100 bus compatibility. 

In Nestar's present release, cross 

loading of programs from one 


, 


. 


Cluster/On can Interconnect up to 30 personal computers for such applications as 


program development and laboratory autom: 
computerized Instruction. 33 


machine type to another is not su 
ported; however, Saal promises this 


restriction will be removed in a new . 


release planned for the third quarter 
of this year. He cautions, however, 
that the user must make any changes 
required because of differences in 
the exact form of BASIC provided on 
the various computer types. ‘“Pro- 
* grams using only standard BASIC 
features,” Saal says, “will be trans- 
portable without modification.” 
Nestar also intends to provide print- 
er spooling this June. Such printers 
as the AXIOM 820 electrosensitive 
type or the Lear Siegler Model 300 (a 


180-character/second, bidirectional, ° 


dot-matrix unit) will be supported. 
Planned additions include an eight- 
inch Winchester drive next year, 

scheme using coaxial cables to extend 
communications over thousands of 
feet at present speeds and a new cen- 


tral unit that will include the Queen, 
In laboratory use, local instru- 
ments can be interfaced to user sta- 
tions for data collection or monitor- 
ing. 
Users interested in developing pro- 


ation. The principal application so farhas been 


Pe 


grams for microcomputers can con- 
nect several stations to the Cluster/ 
One to modify or test a common 
library of programs. 

The price of the basic Cluster/One ~ 


. is $4500. Optional features, at added 
+ cost, are dual double-sided diskette 
* drives, additional memory and Clus- 


terBus extender, These items are now 
available. 

For further information contact 
Nestar Systems, Inc., 430 Sherman: 
Ave., Palo Alto, CA 94306, (415) 327- 
0125. 

' —Stan Baker 
Circle 205 on Reader Service Card 


AS ADVERTISED: 


The New Nestar Cluster/One “Model A” 


Computer 


System 


Breakthrough 


This white ‘‘black box"’ makes 2 to 65 low-cost Apple computers 
into a high-speed computer network with an unlimited number 
of multi-user applications. 


is for Apple...a 

first-rate personal 

computer. 

“Model A” is for the 
Nestar network that uses as 
few as two or as many as 65 
standard Appie computers; one 
becomes a central processor, 
the others, interacting stations 
up to 1,000 feet away... Each 
station connects to a central 
storage system capable of 
storing up to 33 million bytes 
on a single hard disk... Atan 
unbelievably tow cost. 


This is the new Nester Cluster/One 
“Model A" ...a unique proprietary 
network that allows the user to execute 
programs in either the Apple Disk 
Operating System or the Apple Pascal 
System environment. And ihe programs, 
files and data for either system reside 
in the central unit 


Information can be transmitted from 
machine to machine directly without 
going through disk files and without the 
Need for modems. All stations share 
access either to private data or to a 
comenon read-only Borary of programs 
and data. All stations can update data 
bases simultaneously. 


Limitless Applications 
This allows —as only one example 
of an infinite number of muttiuser 
applications — role playing by a number 
‘of executives in a business problem 
simulation. 


Other userwritlen applications may 
include: classic central data-base 
systems * inventory control * account- 
ing procedures « legal brief storage 
and reference * mailing list manage- 
ment © medical patient-information 
records * word processing with com- 
plete editing capability * electronic 
mall systems © inter-office memo 
systems * multi-user interactive 
simulations ¢ financial planning 
systems © data acquisition * educa- 
tional applications. 


Applications limited only by the 
user's requirements and imagination. 


This ordinary Appte computor has now 
become... without any modifications ...1the 
centrat controller in the Nestar network. 


Shared or Private Data 


All information can be shared among 
users or —using the system's protection 
mechanism can be password-protected 
50 that only one designated individual or 
group has access to specific data. 

(As an example, a number of 

people may have permission to read 

specific data but may not have the 

ability 10 modify those data.) 

In the Nestar “Model A” network, a 
standard 48K Apple can function as the 
Gedicated ceniral contrower/mass storage 


version 2 


manager, with connactions to the Nestar 
Slorage subsysioms and to other Appies 
that serve a8 user Stations. Each station 
is connected to the ClusterBus which can 
be up to 1,000 feet of 26-wire ribbon 
cable or standard DB-25 round cable. 


The White “Black Box” 


The “Model A" consists of a compact 
metal Dox with two double-sided 6-inch 
floppy disks with formatted available 
storage af 1,260,000 bytes; the necessary 
electronics which plug into the o 3 
controller Apple; the ClusterBus commun: 
ication card: the communication cards 
required for each Appie station, and all 
necessary software. Also available as an 
option is the Nestar hard disk drive with 
either 16.5 or 33 million bytes ol tormal- 
ted available storage in a Single unit 

The user station communication cards 
contain 2KB of ROM, 1KB of RAM and ait 
necessary bus electronics. Fhey are 
compatible with standard Apple interface 
cards including those for minidisks, serial 
and parallel printers, modems, sound, and 
Graphics tablets. The ChusterBus com- 
munication card plugs into any of the 
peripheral connectors inside the Apple 
and Is perceived by the Apple to be an 
Apple mini-disk controller card and thus 
will be automatically intialized when the 
Appie is turned on. 


Why the Apple? 


Programs written in language sup- 
ported currently by Appie— Applesott 
BASIC, Integer BASIC, machine language. 
Pascal-— will function without change in 
the “Model A.” Any hardware in the 
Apple universe obeying Apple standard 
conventions can be used. Most applica- 
tions in automation, accounting, legal. of 
small business use can be immeately 
put to work without any reprogramming. 
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TAPE BACK-UP 


NETWORK 
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SERVER 


APPLE II 


NESTAR CLUSTERNET 


APPLE I 


APPLE Ill 


PERSONAL 
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¢ 38,467 physical objects 
¢6,629 photographs 

¢ 3,002 videos 

¢81/7 oral histories 
¢42,29/7 documents 
¢8912 software objects 
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) Enjoy Local Networking—Now! 


Don't merely imagine what a local computer network Distributed Computer Performance Software, Software, Software 
could do for r bus ] 3 t este While you save dollars, you also get performance If you're still skeptical about microcomputers, we strongly 
Cluster/One™, Model A (for App! dis ¢ a ben at mini-based systems can't duplicate. For suggest that you take another look at the Apple's capa- 
Best of all, you can example: Since each station is a computer initself, users _ bilities. And while you're at it, check out the software 
substantially less th 1sé time no matter what the load on the that's available for the Apple—literally thousands of pro- 
would cost you example: If one terminal breaks down grams. And Nestar is developing specific software for 
Th: you don't lose whole system. luster! ™ Nestar’s proprietary 
This Network Does It All! you don't lose whole syste! luster/One. THE MESSENGER™, Nestar’s proprietary 


When you invest money, time and energy i 
you deserve full net king capabiliti a shared 
disc system imitating a network. Ne: ables every 
Station (computer or peripheral) to talk to every other 
station, That's flexibility for distribut omputir 
That's growth © 


ararveek A Field-Proven System electronic mail system.is available already! 
We don't sim a Ready When You Are J= 
great capabilities. We can We're ready to deliver 
demonstrate them. Ournet- _ right now. We offer special 
works are working rightnow. di unts to commercial 
In banks. In travel agencies. OEMs and software inte- 
Inschools and colleges. Qrators, as well as systems 
Even in an amusement houses. Cail or write for 
Park's coin-operated free literature, including a 
computer arcade. Insum: detailed discussion of net- 
ster/ One, Model Aisa works vs. other solutions. 
e product 


The Economics of Nestar 

With a Nestar Cluster/One, Model A, you can network 
up to 65 Apple computers. You enjoy incr 
mies of scale as the system grows, because eve 
in the network can share ex; 
quality printers. Low cost-per-byt 
High speed modems. 


The Cluster/One 


body 


NESTAR Systems Incorporated 
430 Sherman Avenue, Palo Alto, 
CA 94306, (415) 327-0125 
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oad "ideal as neworng hfoctheSinias ested mae LOCal Area Networks 
vue local area networks in large institutions than any other For Large Organizations 


‘Soon the giants will be involved in networking and that will 


ensure broad industry support. NESTAR's products will be totally 
compatible and complementary to the systems 
Sold by the giants. it way you receive the 4 
advanced technology and responsiveness of 
NESTAR today with the comfort that compati- 


bility with giants brings. 
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Area 
Networks 
Can’t 


e 
Pass This Gone, 
imple Te © eaten enone 
Simple Test... etal asta i 
branch in Manhattan, Kansas—as well as 


"your regional office in Chicago. Here are some 
technical details: 

Our PLAN 2000™ links IBM PCs. Use our 
PLAN 2000 to link as many as 255 IBM PCs or XTs ina token 
passing network that can cover several miles. Any one station can 
access up to three printers and eight hard disks at a time. 

Our PLAN 3000™ is a bargain for IBM PCs and Apples. You can get 
afile server, a print server, 3270, 3770 and 3780 emulation, electronic mail, Apple 
and IBM PC support, 6 operating systems, multi-level file structures, multi-level pass- 
word protection, disk capacity as small as 10 Mbytes, high-speed digital tape back-up, and 
. more! Best ofall, a 10 Mbyte file server costs less than $10,000. 

Our PLAN 4000” grows from 30 to 548 Mbytes. It offers all the features of the PLAN 3000, 
and has enough capacity to handle very large organizations. 
Don't buy more or less networking than you need. Contact Nestar Systems, 2585 East Bayshore 

Road, Palo Alto, CA 94303, (415) 493-2223, 

Telex: 171420-NESTAR PLA. In Europe 
contact Nestar Systems Limited, 122/3 High 
Street, Uxbridge, Middlesex UBS JT, 
United Kingdom, Tel: Uxbridge (0895) 59831, 
Telex: 896607, 


NESIAR 


PLAN 3000 FILE SERVER NESIAR PLAN 5000 
PLAN 4000™ FILE SERVER PLAN SERIES MULTI-FUNCTION FILE SERVER 


Neszar’s PLAN 5000 ss a high capacity, floor stand- 
ing, multi-function server typically supporting 30 to 
60 users per file server. Designed to provide the 
larger capacty needed to support heavy storage 


requirements with multiple additional server func- 
tions, the PLAN 5000 is 2 key component of 
Nestar’s total systems approach to resource and 
information sharing. The PLAN 5000 combines 
sophisticated networking technologies wkh field- 
Proven server firmware to provide a distinctive, 
highly useful information systems networking 
product for use by large organizations. 


The PLAN 5000 is a mult-function server, manag- 
ing access to muttiple printers and shared disk stor- 
age for networked user workstations [PCs]. Its 
features include: 
@ Password protection; 
@ Efficient storage, with back-up capability; 
@ Error checking and recovery. 
@ Reliable, integrated tape back-up: 
@ Fault-tolerant (Shadow™) mode; 
ontrolied access to files; 
@ System manager function; 
@ Print server supports two parallel plus 
one serial printer; 
@ Simultaneous de-spooting on all three 
printers; and 
1 User-specified printer forms, set up, 
number of copies, and priority. 
Additional functions are available through co- 
processor expansion cards, One print server co- 
processor card is standard, 


The PLAN 5900 can support up to 255 worksta- 
tions, servers, and server co-processors on a single 
network, including any combination of IBM anc 
IBM-compatible PC workstations. The server is 
housed in an attractive, movable cabinet that fits 
conveniently under a desk or table. Disk capacity 
is modular and easily expanded. The system 
management console can be located near the 
server or remotely. 


The PLAN 5000 is designed to permit users to 
share data and programs in a secure, reliable 
sysiern with complete back-up. 


V4 BB PERSONAL COMPUTER-BASED LOCAL AREA NETWORKS 
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Nestar Systems, Inc. 


¢ File server 7 pana _ 
¢ Transparent redundancy (“The Shadow’) 3. ais 68000 CPU board 


e Print server 

: Appl 
¢ File Transfer Server (modems!) ‘ae PASCAL) 
e Telex server 


¢Email (“The Messenger“) 
* Chat ("Talk") fats and clones 
¢e Database server (DBMaster) 
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1978 — 1986 
R.I.P. 
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Why did Nestar fail? 


¢Too early 
¢-Bad LAN bets 


¢first proprietary flat cable 

ethen Datapoint ARCNET 

¢then IBM Token Ring 

e Xerox XNS network protocols (not TCP/IP) 


«Corvus and Novell ate our lunch 
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Charles Babbage 
1791-1871 
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Byele)er=l0[-mom ice) ale mel Olexcyt 


Log, 342. 


oe? 
36/ 


On finding errors in a newly 
computed set of tables, 
Babbage exclaimed: 


“?! wish to God these 


calculations had been 
executed by steam” 


In(x+1) = x —-% x2 +4, x? -% x4 4... 


Eo 


6/ LNum. 0 ] 
so {2200]3424227/ 4424 


2210 


220 


N. 220. 


1 6200) 6398 
2 8173) 8370 
3]3430145) 0342 
4 2116] 2313 


5] 4086 | 488 
6] 6055) 6252 
71 8023) 8220 
8} 999]} 0187 
913441957| 2154 


3923) 4119 
1 5887| 6084 
2 7851) 8048 
3 9814| 0010 
413451776) 1972 


5 3737| 3933 
6 5698) 5894 
ff 7657| 7853 
8 9615) 9811 
913461573) 1769 


3530) 3725 
1 5486) 5681 
2 7441) 7636 
3 9395) 9590 
413471348) 1543 


A Rann! 2404 


4622 
6595 
8568 
0539 
2510 


4480 
6449 
8417 
0384 
2350 


4316 
6280 
8244 
0207 
2168 


4129 
6090 
8049 
0007 
1964 


392] 
5877 
7831 
9785 
1738 


RAQ1! RRRAl ANAT. 


ai alsuen \V/Cs)ealeleme)m D)iaisiasyalesiom 


Xx FE (X) 1st 2nd 


difference difference 


ST F(x) =x? +4 


\\\ 
\ 
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; $928 


Babbage’s Difference Engine 


“gage | ° beganin1823 «+ 16 digit numbers 
= ° 6 ces ¢ complex printer 


Yarn ee 


7 $= 


¥. 


ee 
2h SSS Ig 


Babbage’s Scorecard 
hee eon 
ee any 
£17,000 ($2M) + 19 years rs 
= 12,000 of 25,000 parts made 


The project collapses. 
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31 digit numbers 


-order differences 


7th 
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8000 parts made F — a ata | 
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SUCCESS! 7 rae | PET EE " 
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VWiiteiitittier iii 


Doron Swade 
London Science Museum 
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Mamber Frards 


‘3; General plan of Mr Babbage’s great calculating engine, 1840. 


A real computer 


separate CPU (“mill”) and memory (“store”) 


= pipelining and parallel processing 
= conditional branches and loops 


microcoded carry lookahead 


i ma ish oo es i “es -yeoN OF eau foram 
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Fig. 2. Flan of Asutytical Engine with arid lazeaz, 158 Redraw 


Cexstsxe) aKomliV owe (stclaalexe 


BGP, OSPF, VXLAN, IPSEC, DHCP, 
IPV6, 802.11. 


FUCK, NETWORKING IS 
HARD 


memegenerator.net 
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TART 


Transmit and Receive Totaliser 


te | 
DT hd | es 


|. por Se 
: ‘ 


(designed by Nestar UK) 


potted, 
not patented! 
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rem Create the source and destination filters. Packets will be accepted 
rem if (SRC(source) AND DST(destination)) is non-zero. 

rem This clever idea is due to John Murphy at Datapoint, and can be used 
rem in many more ways than the code here allows. 


IF (STN1$+STN2$)<>"XXXX" THEN 3600 
FOR I=0 TO 255: SRC%(I)=1: DST%(I)=1: NEXT I: rem complete wildcard 
GOTO 3899 


3600 IF STN1$<>"XX" THEN 3700 
FOR I=0 TO 255: SRC%(I)=2: DST%(I)=1: NEXT I: rem one station wild 
IF BROADCAST% THEN DST%(0)=3 
SRC%(STN2%)=3: DST%(STN2%)=3: 
GOTO 3899 


3700 IF STN2$<>"XX" THEN 3800 
FOR I=0 TO 255: SRC%(I)=2: DST%(I)=1: NEXT I: rem other station wild 
IF BROADCAST% THEN DST%(0)=3 
SRC%(STN1%)=3: DST%(STN1%)=3 
GOTO 3899 


3800 rem neither station wild 
FOR I=0 TO 255: SRC%(I)=0: DST%(I)=0: NEXT I 
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The end of Nestar 


Nestar Systems assets 


“TART” technology 
to Harry and Len 


DSC: Digital Switch Corporation 
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«Goals 
eMake TART Into a product: “Sniffer” 
eSell 100 of them 
eFigure out something else to do 
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apture filters 


Figure 3-2: The first panel of the Sniffer’s Main Menu. 
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Sniffer V1.0 source code 


if (menu_key == -K_RIGHT) { /* scroll version */ 
tr_makefile (&wwdx, &level [center_level+1], center_level+1); /* make new right memory file */ 
mv_cs (W_CENT_ROW, 3, &wwtc); /* center window: */ 


v_natt (LREVERSE, ENDROW, &wwtc); /* reverse bar */ 
pl_wn (W_TOP_ROW, W_LEFT_COL+3*W_WIDTH-3-SS_ STEP, &wwts); /* scroll window supplies left edge */ 
step = stepsize; /* initial hop size for each movement */ 
for (i=0; i < W_WIDTH-1; i += stepsize) { 
hslide (W_TOP_ROW, W_LEFT_COL+1+step, /* upper left cnr of slide rectangle */ 
W_HEIGHT, W_WIDTH*3-4-step, /* size of rectangle */ 
-step, video_mode); /* slide to the left */ 
for (j=0; j < step; ++j) | /* add new columns on the right */ 
show_col (&wwts, SS_STEP-step+j, &wwdx, itj); 


} 
dtemp = wwtl.dataf; 
wwtl.dataf = wwtc.dataf; /* shift data file ownership */ 


wwtc.dataf = wwtr.dataf; 

wwtr.dataf = wwts.dataf; 

wwts.dataf = dtemp; 

mv_cs (W_CENT_ROW, 3, &wwtc); /* center window: */ 
v_natt (LREVBLINK, ENDROW, &wwtc); /* flashing bar */ 


} 

else /* -QK_RIGHT */ { /* non-scroll version */ 
tr_makefile (wwtr.dataf, &level [center_level+1], center_level+1); /* show new right ww */ 
tr_showfile (&wwtr, LNORMAL, FALSE); 
tr_makefile (wwtl.dataf, centerl, center_level-1); /* show old center in left ww */ 
tr_showfile (&wwtl1, LNORMAL, FALSE); 


tr_makefile (wwtc.dataf, rightl, center_level); /* show old right in center ww */ 
tr_showfile (&wwtc, LREVBLINK, TRUE); /* with blinking bar */ 
show_info (newrightl->node, &wwtb); /* show info for selected center node */ 


} /* can move right */ 
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...with 8086 assembler help 


move si to last word of row 


amount * 2 


; starting di = si + amount * 2 
; precompute endline adjustment for si/di 
; bx = 2 * (v_coqg + colq) 


;backward string direction 
;dl = number of rows to do 
;setup segment regs 


;leave with direction forward 
;maybe turn video back on 


;restore segment regs 


: Do a right slide using backward string moves 
do_right: add si,colq[bp] ; 
add si,colq[bp] 
sub si,2 
sal ax,1 . 
mov di, si 
add di, ax ; 
mov bx, V_coq : 
add bx, colq[bp] F 
sal bx,1 
std 
mov d1, rowq[bp] 
mov ax, V_seg 
mov ds, ax 
mov es, ax 
call do_move 
cld 
quit: or dh, dh 
jz no_unwait 
call unwait 
no_unwait: pop es 
pop ds 
pop bp 
ret 


yreturn 
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PRODUCT FEATURES 


SPECIFICATIONS 


Package 


Weight 


Voltage 


Memory 


Display 


Warranty 


Software 


ORDERING INFORMATION 
Model Numbe PA 


Price (USA 


Network General Corporation 
1296B Lawrence Station Road 
Sunnyvale, CA 94089 
(408) 734-0464 
FAX (408) 734-1828 


Me Swiffer. 


Token-Ring Network 
Portable Protocol 
Analyzer 


aliiisy amas 


PRODUCT SUMMARY 


Network General's Token-Ring Network 
Portable Protocol Analyzer, “The Sniffer,” 
is a combination of hardware and soft 
ware which serves as a data analyzer for 
the IBM Token-Ring Ne k. The Snif- 
fer’s unique hardware fe is its ability 
to capture all frames transmitted on the 
network. Together with high-level soft- 


that a log f 

nals. The Sniffer is built around a high 
performance (8 MHz) portable per 
computer, making it a useful tool bot 

the field and in the lab 


SAMPLE 


‘ 
enue Options! 
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SCREENS 


mee fe 
Keon | Revae Options 


[ 


What to charge 


Sniffer cost of goods 
computer: $1800 
network adapter: $200 
software: $10 
total: $2010 


Len: “40% markup: $2800” 
Harry: “$25,000. It’s worth it.” 
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“Manufacturing” 
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Network General Corp. 
sagen! bins a version of 
its Sniffer network protocol 
analyzer that supports Apple 
seas The ble veces of the 
j nets. e 
euse Manufacturer’s reps Sie wil et wes evaluat, 
shoot Eth tha 
¢thank you, George Comstock running the fll range of AD- 
fo Spey 
edemo at the customer port token nes within 
the next several months. 
Called the PA-1310 Apple 


¢ “look at all those passwords” Protocol Suite, the software 


: ; — —e all ooh Ang 
. It sold ItS elf rk The Sniffer sham hp 
ar rears a are etapa 
emore networks, more Pls fe eco and sae nts 
and monitor real-time net- 

work performance. 
The PA-1310 Apple Proto- 


col Suite is available now and 
has a list price of $995. @ 


Selling the Sniffer 
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Price by value, not by cost 


We sold all we could make at $25,000 
and customers were delighted to pay It. 


1986: 8 Sniffers 
4 employees 


1995: 1000 Sniffers/month 
1000 employees 
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What a ride! 


$200,000,000 
$180,000,000 


$160,000,000 


$140,000,000 
$120,000,000 


em=mmrevenue, $ 


$100,000,000 : 
=== gross margin, % 
$80,000,000 ———= profit, % 

$60,000,000 
$40,000,000 


$20,000,000 


$0 
cy91 cy92 cy93 cy94 


apture filters 


Figure 3-2: The first panel of the Sniffer’s Main Menu. 
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= Number of frames ftom the stacion: oo 
2503. IBM PC #1 > Hatrys PC. 8 
“Broadcast. {| 34: Server 8. 
Broadcast IBM PC #1- 8: 
Broadcast |... Néwman- 8 
LAN Manager} > chee 


2341 Kbytes, 


hs ete 
ae Frames pet second BS 
: screen. : _. Pause 


_ capture: 


Roa 4- 13: Diineise ribiilation dena capture, iy sending station and iddroasce: 
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IA XID Fmt 3 T2 NETWORK .RCvP | 
A XID Fmt. Bc Sy pr 3 “NETWORK. .SI ) 
XID: emt 3 T2 eee 


IA XID Fmt 3. 2 Renee Cane 
REQ: BIND SENDLU | - 
ARSPEBIND eee 


: REP: op 
| ENA RSEL ou 
VA REQ: Bi! 
“REQ: UN 


: EES 6Disply 7 Prev 8 Next  —— 
a Help matk _ Menus © options Beene SrOne ae AA a 


Fi, igure a I 1 Saunary view, showing Bhan 35 in the context ier neighboring Aimee. 
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a ee 43 00 01 OF 00 48 
_72 85 20 54 oF 6 


ae 2 ‘Use ‘TAB to: select windous 
~- 4 Zoom 5 - 6Disply 7 Prev | 
& int she Menus _ options. frame : 


Firase: 2- 9: yer of the message. 
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Competition 


LANalyzer 


=>, Go) 0 0)0) mt 
Ethernet Network Analyzer 


User Manual 


EXCELAN 


LANo/yzer 


SEN SOOOE 


“Nutcracker” ——. 
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WALL STREET JiIuRNaL 


ey 4, LT9S7 


“This friendly 
reminder is 
brought to you by 


Sniffer eae 
® 


Wall Street Journal 
Full page ad 
October 4, 1995 
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The big wins 


eEase of use 


eMany protocol interpreters 
¢ Obsessive about reverse-engineering 
proprietary protocols 
¢ Customer-written Pls 


eMany network types 
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3COM 3+ 

AppleTalk ADSP 
AppleTalk AFP 
AppleTalk ARP 
AppleTalk ASP 
AppleTalk ATP 
AppleTalk DDP 
AppleTalk ECHO 
AppleTalk KSP 
AppleTalk LAP 
AppleTalk NBP 
AppleTalk PAP 
AppleTalk RTMP 
AppleTalk ZIP 

ARP 

AT&T 

Banyan VINES AFRP 
Banyan VINES Echo 
Banyan VINES File Svc 
Banyan VINES FRP 
Banyan VINES FTP 
Banyan VINES IP 
Banyan VINES LLC 


Standard Protocol interpreters 


Banyan VINES Ntwk Mgr 
Banyan VINES SPP 


Banyan VINES StreetTalk 


Banyan VINES Svr Svc 
Banyan VINES Talk 
BOOTP 

Bridge bridge mgmt 
Bridge CS-1 

Bridge terminal srvr 
Chaosnet 
ComDesign 

Cronus direct 
Cronus VLN 
Datapoint DLL 
Datapoint RCL 
Datapoint RIO 
Datapoint RMS 
DEC 911 

DEC bridge mgmt 
DEC LAN monitor 
DEC LAST 

DEC LAVC 

DEC NetBIOS 


Banyan VINES Loopback DECNET CTERM 
Banyan VINES MatchmakerDECNET DAP 


DECNET DRP 
DECNET FOUND 
DECNET LAT 
DECNET LAVC 
DECNET MOP 
DECNET NICE 
DECNET NSP 
DECNET SCP 
DNS 

ECMA internet 
EGP 

Excelan 


ICMP 

IONET VCS 

IONET VCS CMND 
IONET VCS DATA 
IONET VCS TRANS 
IP 

ISO ACSE 

ISO ASN.1 

ISO CMIP 


ISO Network 
ISO PPP 

ISO ROSE 
ISO Session 
ISO SMTP 

ISO Transport 
LOOP 
Loopback 
Micom test 
NBS internet 
Nestar ARCnet 
Nestar PlanSeries 
NetBIOS 
NetBIOS TCP 
Novell Netware 
PUP address translation 
RPL 

RUnix 

SMTP 

SNAP 

Sun MOUNT 
Sun NFS 

Sun PMAP 
Sun RPC 

Sun RSTAT 
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Sun YP 
Symbolics private 
TCP 

Telnet 

TFTP 

TRING DLC 
TRING LLC 
TRING MAC 
TRING RI 

U-B 

Vitalink bridge mgmt 
X.25 

X.25 level 3 
X.75 internet 
Xerox BOOTP 
Xerox EGP 
Xerox GGP 
Xerox ND 
Xerox PUP 
Xerox PUP ARP 
Xerox RIP 
Xerox TFTP 
Xerox XNS 
Xyplex 


Network types 


¢IBM Token-Ring eISDN 
e Token Bus «Frame Relay 
e Ethernet (thick, thin, ¢SDLC 
twisted pair) eATM 
¢ Datapoint ARCnet °X.25 
e Starlan ¢ Sytek/IBM broadband 
¢eAppleTalk 
¢ Corvus Omninet 
eFDDI 
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a school for LAN managers 


z= 


Expert Sniffer 


SUNAARY—Delta TET 
1 


atigticg# = 
Conpoo ities of Traffic by Feotecol Fanily * Eondwidth Fram 
6A 3 is 


Le 
Ores ila 


users to rate it #1 among pro- 
tocol analyzers? And LAN 
Times presented Expert Sniffer 
: with both its Reader’s Choice 
The Industry’s Most Advanced Network Problem Solving Tool. 3.4 Editor’s Chitis Awarda: 
When it comes to network __ ing solutions in plain, readable Call for a free demo disk. 
troubleshooting, there’s only English. Expert Snifferalso And see for yourself why the 
one expert. Expert Sniffer? detects trouble signs before experts agree, Expert Sniffer 
the network analyzer from they become real problems, _ jg a network essential. 


Network General* helping you prevent costly 4.890-SNIFFER #G2405 —_“ombine your network expertise with 
Expert Sniffer automatical- downtime. SE Expert Sniffer _— your network up 
a 5 z oe ae ae "= ) and running, 
ly swat and identifies ; _— rt Sniffer s compre. Network | COME VISIT US AT 
network problems. Then it goes hensive protocol interpretation | NETWORLD + INTEROP ‘94 
‘ AT BOOTH #2442. 


one step further by suggest- and expert analysis prompted 


avrg 194 New 


Dyosowe D)siialelelcsiemeyaliiisys 


Distributed Sniffer Systems for Complex Networks 


The Network General Distributed Sniffer Sys- 
tem (DSS) provides the practical solution for 


network managers who need to diagnose the 


SniffMaster for X (SunOS Client) runs on a Sun SPARCstation with SunOS 
4.1x and X-Windows. Applications running on multiple Sniffer Servers 
may be displayed simultaneously. Access to SniffMaster for X may be 
gained by multiple X workstations—or terminals—located throughout 
the enterprise network. 


SniffMaster for X 
(SunOS Client) SniffMaster 
for DOS 


Ethernet 


yO 
O 


Sniffer 
Server 


Sniffer Sniffer 
Server Server 


Distributed Sniffer System on a Network 


Sniffer Lite: “Watchdog” 
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Networks 


The Watchdog Sniffs Out LAN Traffic Statistics 


Network General’s Management Tool Presents a Vast Amount of Data in a Logical Way 


By Perer Tait Review BOARD 


ocal area networks have been 
around for more than a decade, 
and in that time the typical LAN 
has undergone incredible 
changes. It makes sense that the 
tools available for maintaining 
LANs should also evolve to keep 
pace with these changes. 

Network General Corp.’s Network 
Monitor Watchdog 1.0 is an example of 
the latest kind of tool for LAN mainte- 
nance and troubleshooting. As networks 
grow, the high cost of system down time 
easily justifies the expense of sophisticat- 
ed analysis or management tools such as 
Network General's Sniffer or Hewlett- 
Packard's Lanprobe. 

The problem: As PC LANs have 
proliferated, the average cost of each 
network node has dropped, making it 
harder to justify $20,000 analysis tools for 
anything but the largest networks. 

Watchdog provides some of the 
functionality of its big brother, the 
Sniffer, without any of the sophisticated 
protocol analysis features for about one- 


tion of the packets on an Ethernet 
network are Novell, DEC-Net, XNS, or 
any of the other protocol types, what the 
average packet size is, and how many 
packet errors there are for each node. It 
cannot, however, disassemble a given 
packet into the rest of its protocol layers. 
Because the manager of a large network is 
more interested in knowing who is 
generating traffic or errors than what each 
data packet contains, this is likely to be a 
worthwhile trade-off for most users. 

Watchdog consists of three compo- 
nents — a network adapter card, a TSR 
program that captures data from the 
network card, and the application soft- 
ware for displaying the captured informa- 
tion. In order to examine network packets 
straight off the wire, Watchdog uses its 
own network interface card, or NIC. (It 
must be ordered with the appropriate 
adapter for your network. Although 
Watchdog currently supports only Ether- 
net versions, a token ring version will be 
available by the end of the year.) The 
version we tested, for Ethernet networks, 
included a Racal Interlan card. 

Using a separate NIC does offer a 
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Network General revenue, $ 


$200,000,000 
$180,000,000 
$160,000,000 
$140,000,000 
$120,000,000 
$100,000,000 
$80,000,000 
$60,000,000 
$40,000,000 
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the Sniffer ® lives on... 


COMMERCIAL 
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Computer 
History 
‘1H Museum 


¢Collection 
¢ hardware, software, images, video, documents, source code, etc. 


¢ Exhibits (real and on the web) 

¢Public programs 

¢Historical research and journalist outreach 
¢e Education 

«Corporate archiving 

enew: Software History Center 


enew: “Exponential” Center on entrepreneurship 
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New third building: 


Archival and 
research center 


> 
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